Are you using a CDN like CloudFlare or some kind of load balancer or reverse proxy in front of your apache instance? In that case, youโd need to use a different challenge type, as TLS-SNI-01 does not work in such scenarios. One possibility would be the webroot plugin.
If itโs not related to that, please re-run the client using -vvvv and provide the full output and log files from /var/log/letsencrypt.
No not using Cloudflare. I managed get this installed on Plesk extensions and on each site individually, busy testing now. But all looks good, thank you for the quick reply/